Extracted

• • Target

    NEAS.1585a6480597114c983bef53aeb9a900_JC.exe

  • Size

    1.2MB

  • MD5

    1585a6480597114c983bef53aeb9a900

  • SHA1

    f794754c59ff2242c894c250ff85b265fc2e98f6

  • SHA256

    797c109159ad8f4966a10f64836e0b23d9755eea7f7ed41f9275bb0f0aee4545

  • SHA512

    d41eff1df5c6f6d6d65f155909aafbe1ab5706aae165a309c28ec22631b3c9e8dfd7ef43bf1346ce082dfd30c20ea11bd67eedd3839eebb33539154387b5b560

  • SSDEEP

    12288:8qO+aNyd8yNccY6B0ZHMJ+NxiIZCo3DcQh5AkauK9CmgPrwt9XLROh4CRRnh:YNyd8EccY6BIE05ZC4Xh5oiwLkhZnh

  Score

  10^/10

  redlinebrehainfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2